Contents

Title and Copyright Information

Send Us Your Comments

Preface

• Audience
• Documentation Accessibility
• Related Documents
• Customer Support
• Improved Process for Oracle Retail Documentation Corrections
• Oracle Retail Documentation on the Oracle Technology Network
• Conventions

1 Overview

• Terminology
  • RPASCE Concepts
  • RPASCE Applications
• Secure Deployment
  • Physical Safeguards
• General Security Principles
  • Keep Software Up to Date
  • Follow the Principle of Least Privilege
  • Monitor System Activity
  • Keep Up to Date on Latest Security Information

2 Responsibilities

• Retailer Responsibilities
• Oracle Responsibilities

3 Client Tier Security

• Factors Affecting Security
  • Authentication
    • RPASCE Docker Deployment
    • Web Service Authentication
  • Authorization
    • Authorization Within the RPASCE UI
    • Authorization for PDS Web Services
    • Authorization for Retail Home Metric Tiles
  • Password Policies
• Browser Security
  • Setting Policy For Unattended PC Sessions

4 Compute Tier Security

• User and Group Management
  • Locking User Accounts
  • Roles Created in IDCS or OCI IAM
    • User Roles
    • System Roles
• Authorization
  • Workbook Security
  • Measure Level Security
  • Position Level Security
  • Atomic User Management
    • Non-Business Roles
    • User Lifecycle in Atomic User Management
• Setting Proper Resource Limits
  • WorkbookTemplate Limits Views
  • Max Domain Session Limit View
  • Max User Session Limit View
  • Dimension Modification Rights View
• Managing Sensitive Data
• Online Administration Tools
  • Authorization
  • Auditing

5 Domain Security

• Configuration Management
• Dynamic Position Maintenance
• RPASCE Maintenance

6 RPASCE Integration

• Data and Metadata Integration
• Integrating User Information
• Integrating Dimension and Measure Data
• RPASCE Planning Data Store
  • Use of ORDS in Conjunction with the Planning Data Store
    • Creation of Additional Service Endpoints

7 Extending and Customizing Products